org.apache.nifi.security.util.crypto

Class PasswordBasedEncryptor

java.lang.Object

org.apache.nifi.security.util.crypto.AbstractEncryptor

org.apache.nifi.security.util.crypto.PasswordBasedEncryptor

All Implemented Interfaces:

EncryptContent.Encryptor

public class PasswordBasedEncryptor
extends AbstractEncryptor

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
private class	PasswordBasedEncryptor.DecryptCallback
private class	PasswordBasedEncryptor.EncryptCallback

Field Summary

Fields

Modifier and Type	Field and Description
private static int	DEFAULT_MAX_ALLOWED_KEY_LENGTH
private EncryptionMethod	encryptionMethod
private KeyDerivationFunction	kdf
private static org.slf4j.Logger	logger
private static int	MINIMUM_SAFE_PASSWORD_LENGTH
private PBEKeySpec	password

Fields inherited from class org.apache.nifi.security.util.crypto.AbstractEncryptor

flowfileAttributes

Constructor Summary

Constructors

Constructor and Description
PasswordBasedEncryptor(EncryptionMethod encryptionMethod, char[] password, KeyDerivationFunction kdf)

Method Summary

Modifier and Type	Method and Description
StreamCallback	getDecryptionCallback()
StreamCallback	getEncryptionCallback()
static int	getMaxAllowedKeyLength(String algorithm)
static int	getMinimumSafePasswordLength() Returns a recommended minimum length for passwords.
(package private) static Map<String,String>	writeAttributes(EncryptionMethod encryptionMethod, KeyDerivationFunction kdf, byte[] iv, byte[] kdfSalt, ByteCountingInputStream bcis, ByteCountingOutputStream bcos, boolean encryptMode)

Methods inherited from class org.apache.nifi.security.util.crypto.AbstractEncryptor

updateAttributes, writeAttributes

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

logger

private static final org.slf4j.Logger logger

encryptionMethod

private EncryptionMethod encryptionMethod

password

private PBEKeySpec password

kdf

private KeyDerivationFunction kdf

DEFAULT_MAX_ALLOWED_KEY_LENGTH

private static final int DEFAULT_MAX_ALLOWED_KEY_LENGTH

See Also:

Constant Field Values

MINIMUM_SAFE_PASSWORD_LENGTH

private static final int MINIMUM_SAFE_PASSWORD_LENGTH

See Also:

Constant Field Values

Constructor Detail

PasswordBasedEncryptor

public PasswordBasedEncryptor(EncryptionMethod encryptionMethod,
                              char[] password,
                              KeyDerivationFunction kdf)

Method Detail

getMaxAllowedKeyLength

public static int getMaxAllowedKeyLength(String algorithm)

getMinimumSafePasswordLength

public static int getMinimumSafePasswordLength()

Returns a recommended minimum length for passwords. This can be modified over time and does not take full entropy calculations (patterns, character space, etc.) into account.

Returns:

the minimum safe password length

writeAttributes

static Map<String,String> writeAttributes(EncryptionMethod encryptionMethod,
                                          KeyDerivationFunction kdf,
                                          byte[] iv,
                                          byte[] kdfSalt,
                                          ByteCountingInputStream bcis,
                                          ByteCountingOutputStream bcos,
                                          boolean encryptMode)

getEncryptionCallback

public StreamCallback getEncryptionCallback()
                                     throws ProcessException

Throws:

ProcessException

getDecryptionCallback

public StreamCallback getDecryptionCallback()
                                     throws ProcessException

Throws:

ProcessException